Hello,
Today something very strange happens on my SMTP Gateway.
Our Gateway SMTP is configured to relay mail to many domains.
Amavisd-new tag the subject of spam (with [SPAM]) and forward the mail.
I also configured the spam_admin to receive a notification each time
a spam is forwarded.
Our Exchange server has been stopped for 3 hours for maintenance, so
all mail were in the postfix queue.
When we reactivated the Exchange Server, some of the notification
e-mail where tagged as spam by amavis.
See the header of one of those email below:
>From - Thu Mar 1 21:16:58 2007
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Received: from avmail3.safehostnet.com ([80.80.225.11]) by
SH-EXCH.office.safehostnet.com with Microsoft SMTPSVC(6.0.3790.1830);
Thu, 1 Mar 2007 20:14:44 +0100
Received: from localhost (localhost.localdomain [127.0.0.1])
by avmail3.safehostnet.com (Postfix) with ESMTP id A7238812F
for <[EMAIL PROTECTED]>; Thu, 1 Mar 2007 20:14:44 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at avmail3.safehostnet.com
X-Spam-Flag: YES
X-Spam-Score: 5.934
X-Spam-Level: *****
X-Spam-Status: Yes, score=5.934 required=5.5 tests=[ALL_TRUSTED=-1.8,
BAYES_00=-1, URIBL_JP_SURBL=4.087, URIBL_OB_SURBL=3.008,
URIBL_SBL=1.639]
X-Spam-Report:
=?iso-8859-1?Q?=0A=0A*_-1=2E8_ALL=5FTRUSTED_Passed_through_trusted_hosts_?=
=?iso-8859-1?Q?only_via_SMTP=0A*_-1=2E0_BAYES=5F00_BODY=3A_L=27algorithme?=
=?iso-8859-1?Q?_Bay=E9sien_a_=E9valu=E9_la_probabilit=E9_de=0A*______spam?=
=?iso-8859-1?Q?_entre_0_et_1=25=0A*______=5Bscore=3A_0=2E0000=5D=0A*__1?=
=?iso-8859-1?Q?=2E6_URIBL=5FSBL_Contains_an_URL_listed_in_the_SBL_blockli?=
=?iso-8859-1?Q?st=0A*______=5BURIs=3A_mikpiks=2Ecom=5D=0A*__4=2E1_URIBL?=
=?iso-8859-1?Q?=5FJP=5FSURBL_Contains_an_URL_listed_in_the_JP_SURBL_block?=
=?iso-8859-1?Q?list=0A*______=5BURIs=3A_mikpiks=2Ecom=5D=0A*__3=2E0_URIBL?=
=?iso-8859-1?Q?=5FOB=5FSURBL_Contains_an_URL_listed_in_the_OB_SURBL_block?=
=?iso-8859-1?Q?list=0A*?= [URIs: realtypak.com]
Received: from avmail3.safehostnet.com ([127.0.0.1])
by localhost (avmail3.safehostnet.com [127.0.0.1]) (amavisd-new, port
10024)
with ESMTP id q9LmXp0K-dO5 for <[EMAIL PROTECTED]>;
Thu, 1 Mar 2007 20:14:36 +0100 (CET)
Received: by avmail3.safehostnet.com (Postfix, from userid 101)
id 7715F8148; Thu, 1 Mar 2007 20:10:29 +0100 (CET)
Received: from localhost (localhost.localdomain [127.0.0.1])
by avmail3.safehostnet.com (Postfix) with ESMTP id 527118624
for <[EMAIL PROTECTED]>; Thu, 1 Mar 2007 19:53:49 +0100 (CET)
Content-Type: multipart/mixed; boundary="----------=_1172775229-26982-1"
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
Date: Thu, 1 Mar 2007 19:53:48 +0100 (CET)
From: "Content-filter at avmail3.safehostnet.com"
<[EMAIL PROTECTED]>
Subject: [SPAM] SPAM FROM <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Message-ID: <[EMAIL PROTECTED]>
Return-Path: <>
X-OriginalArrivalTime: 01 Mar 2007 19:14:44.0800 (UTC)
FILETIME=[DF04BC00:01C75C35]
Can somebody explain me why the notification email where tagged as
spam ?
Thanks in advance.
--
Jyce
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
